Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Azbuka Vkusa' disclosed a bug submitted by b'sachin_kumar_' 
b"IDOR - Other user's delivery address disclosed"

15 Nov 2021

b'GitLab' disclosed a bug submitted by b'jobert' 
b'Use of Ruby Forwardable module and runtime meta-programming may introduce vulnerabilities'

15 Nov 2021

b'GitLab' disclosed a bug submitted by b'doyensec' 
b'ReDoS in syntax highlighting due to Rouge'

15 Nov 2021

b'Informatica' disclosed a bug submitted by b'fdeleite' 
b'CVE-2021-40870 in []'

15 Nov 2021

b'ownCloud' disclosed a bug submitted by b'shell_c0de' 
b'Possible to steal any protected files on Android'

15 Nov 2021

b'PortSwigger Web Security' disclosed a bug submitted by b'cometome780' 
b'Information disclosure on error message'

15 Nov 2021

b'Acronis' disclosed a bug submitted by b'darkdream' 
b'Stored XSS in profile page'

14 Nov 2021

b'Panther Labs' disclosed a bug submitted by b'dhakal_bibek' 
b'Broken subdomain takeover of runpanther which was pointing towards herokuapp'

13 Nov 2021

b'U.S. General Services Administration' disclosed a bug submitted by b'7azimo' 
b'Unauthorized access to employee panel with default credentials.'

13 Nov 2021

b'GlassWire' disclosed a bug submitted by b'msvr' 
b'GlassWire 2.1.167 vulnerability - MSVR 56639'

13 Nov 2021

b'GitLab' disclosed a bug submitted by b'vakzz' 
b'Drive-by arbitrary file deletion in the GDK via letter_opener_web gem'

12 Nov 2021

b'Slack' disclosed a bug submitted by b'jub0bs' 
b'Cross-site leak allows attacker to de-anonymize members of his team from another origin'

11 Nov 2021

b'Judge.me ' disclosed a bug submitted by b'cametome006' 
b'The response shows the nginx version'

11 Nov 2021

b'Concrete CMS' disclosed a bug submitted by b'byc_404' 
b'A bypass of adding remote files in concrete5 FIlemanager leads to remote code execution'

11 Nov 2021

b'New Relic' disclosed a bug submitted by b'mr-hakhak' 
b'Reflected XSS in VPN Appliance'

10 Nov 2021

b'Rockset' disclosed a bug submitted by b'jhimansh' 
b'A member-member privilege could access the https://console.rockset.com/billing?tab=payment page even though the billing page is hidden from the menu. '

09 Nov 2021

b'Rockset' disclosed a bug submitted by b'shad0123' 
b'Failure to Invalid Session after Password Change'

09 Nov 2021

b'Internet Bug Bounty' disclosed a bug submitted by b'monkey_logic' 
b'Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49'

09 Nov 2021

b'Shopify' disclosed a bug submitted by b'sam_exploit' 
b'Senseitive data Related to Shopify Host -> https://shopify.zendesk.com/'

08 Nov 2021

b'Shopify' disclosed a bug submitted by b'xenx' 
b'Blog posts atom feed of a store with password protection can be accessed by anyone '

08 Nov 2021

1 ... 139 140 141 142 143 ... 718

BY DENIS WERNER - @NOBBD - IMPRESSUM